Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/fTTJaw_54nEtImNHGANh9X5pCjU.roa
File: fTTJaw_54nEtImNHGANh9X5pCjU.roa (raw, json)
Hash identifier: IDhG7BAffdnYnvyt684I59EEhWvx4nR1U8ujkTq4BHo=
Subject key identifier: 7D:34:C9:6B:0F:F9:E2:71:2D:22:63:47:18:03:61:F5:7E:69:0A:35
Certificate issuer: /CN=861f1025b4dd6614581f50c1f85a06734ba5a9f9
Certificate serial: 019F23689F69A5DBC63AB49402D10D7B4F58
Authority key identifier: 86:1F:10:25:B4:DD:66:14:58:1F:50:C1:F8:5A:06:73:4B:A5:A9:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hh8QJbTdZhRYH1DB-FoGc0ulqfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/fTTJaw_54nEtImNHGANh9X5pCjU.roa
Signing time: Thu 02 Jul 2026 15:18:06 +0000
ROA not before: Thu 02 Jul 2026 15:18:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12525
IP address blocks: 2001:67c:554::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/hh8QJbTdZhRYH1DB-FoGc0ulqfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/hh8QJbTdZhRYH1DB-FoGc0ulqfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hh8QJbTdZhRYH1DB-FoGc0ulqfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:9f:69:a5:db:c6:3a:b4:94:02:d1:0d:7b:4f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861f1025b4dd6614581f50c1f85a06734ba5a9f9
Validity
Not Before: Jul 2 15:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d34c96b0ff9e2712d226347180361f57e690a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2a:53:bd:ef:0e:ad:43:20:e6:c9:25:4f:5e:
06:be:47:94:77:2c:71:32:e6:7f:d3:cb:9c:0c:ac:
55:a0:27:fe:6e:d0:c6:d2:74:37:9a:ed:c2:9f:d0:
fe:85:66:40:c8:06:91:0f:9b:bf:94:e3:64:0c:ef:
80:00:53:37:c4:06:7d:c3:cc:ca:fd:64:74:51:95:
0f:04:08:d6:e9:cb:4e:da:9e:12:e8:8e:c3:53:d8:
25:52:c4:00:f7:94:28:6b:4a:22:bf:70:f8:07:a4:
20:b3:37:8b:95:c3:91:11:63:ba:0d:ad:c5:72:0d:
f4:1b:bb:e1:3d:0d:d9:94:b3:57:f6:d8:4b:98:69:
91:76:3f:6f:b9:82:78:78:5b:ad:63:04:38:30:3a:
1c:f8:04:2c:56:38:0e:cf:07:90:cb:ea:c4:84:04:
bf:ce:b3:28:00:0f:54:1f:51:08:3f:0b:46:4b:9c:
03:6c:8a:a7:30:61:4e:25:c6:51:07:0c:77:02:21:
47:85:44:a4:0a:31:56:ed:b6:1a:0c:d3:e8:82:c7:
50:bc:ce:0e:9d:3f:42:b1:cb:77:1a:ca:ca:9b:8f:
a3:3c:40:ac:62:e0:90:e7:d2:b8:f7:30:d0:13:64:
44:62:eb:5e:d4:43:4c:0c:63:66:fc:fa:2b:60:88:
5d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:34:C9:6B:0F:F9:E2:71:2D:22:63:47:18:03:61:F5:7E:69:0A:35
X509v3 Authority Key Identifier:
keyid:86:1F:10:25:B4:DD:66:14:58:1F:50:C1:F8:5A:06:73:4B:A5:A9:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hh8QJbTdZhRYH1DB-FoGc0ulqfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/fTTJaw_54nEtImNHGANh9X5pCjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/hh8QJbTdZhRYH1DB-FoGc0ulqfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:554::/48
Signature Algorithm: sha256WithRSAEncryption
a0:de:37:94:07:7a:d8:93:cb:cf:32:c9:4a:f8:4f:06:e5:8c:
17:e9:42:a1:f0:8f:cb:c5:6b:82:5c:55:96:48:5e:a8:ed:e3:
c1:34:c0:39:f7:00:c3:40:0b:46:92:62:99:fb:fe:e1:ea:6a:
18:4e:8f:68:e3:00:cc:aa:fd:2f:f5:bc:45:e1:88:fc:4d:84:
83:dc:e8:09:a5:3e:3b:0a:dd:e0:e4:eb:a4:ac:20:ee:09:16:
45:b5:10:55:36:fd:90:5b:10:50:dd:89:32:10:8b:de:cb:4c:
2c:43:36:25:4b:21:b6:b4:b7:10:ca:65:35:4e:30:9c:c1:fe:
a3:44:1b:07:7b:85:44:95:0b:db:e4:f7:86:66:bc:bc:66:d3:
f2:d1:ae:79:e2:10:e6:04:ad:47:e4:78:be:0b:23:10:6d:03:
09:dc:8b:98:71:9a:f6:e8:e7:ab:e6:bc:42:53:ec:d4:7f:7a:
23:e1:b1:89:ec:a4:4a:54:2f:4d:0f:28:c9:e1:88:21:8e:38:
16:18:6a:33:48:e8:19:9a:04:a9:a9:e3:97:d7:c7:61:38:d3:
c8:99:e1:70:ba:83:09:a8:f2:fa:e0:8c:5c:6b:0f:40:6f:96:
81:5b:52:77:33:46:98:9e:73:0e:48:59:08:d2:0c:da:4f:69:
ec:22:81:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:37:23 2026 by rpki-client